LeakIX - Host aid.backend.monartisan.ci

Domain aid.backend.monartisan.ci

France

Scaleway S.a.s.

Software information

nginx nginx

tcp/443 tcp/80

sw-cp-server

tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.15.161.204
Domain: aid.backend.monartisan.ci
Port: 443
URL: https://aid.backend.monartisan.ci

First seen 2024-08-23 19:02
Last seen 2024-12-21 18:02
Open for 119 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f21f9c1a50e8dc70e8af792f18af792f1
```
Found 3 files trough .DS_Store spidering:

/bundles
/index.php
/uploads
```
  Found on 2024-12-21 18:02
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 51.15.161.204
Domain: aid.backend.monartisan.ci
Port: 443
URL: https://aid.backend.monartisan.ci/_profiler/empty/search/results

First seen 2024-08-23 19:02
Last seen 2024-12-21 18:02
Open for 119 days
- Fingerprint: 407cf4363b0e62fafca67e079453341b9453341b9453341b9453341b9453341b
```
Symfony profiler enabled:
https://aid.backend.monartisan.ci/_profiler/empty/search/results
```
  Found on 2024-12-21 18:02
Create report

Open service 51.15.161.204:8443 · aid.backend.monartisan.ci

2024-12-21 18:02

HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Sat, 21 Dec 2024 18:02:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Sat, 21 Dec 2024 18:02:15 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: https://aid.backend.monartisan.ci/login.php
X-Content-Type-Options: nosniff

Found 11 hours ago by HttpPlugin

Create report

Open service 51.15.161.204:80 · www.aid.backend.monartisan.ci

2024-12-21 18:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 21 Dec 2024 18:02:14 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.aid.backend.monartisan.ci/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 11 hours ago by HttpPlugin

Create report

Open service 51.15.161.204:8443 · www.aid.backend.monartisan.ci

2024-12-21 18:02

HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Sat, 21 Dec 2024 18:02:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Sat, 21 Dec 2024 18:02:16 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: https://www.aid.backend.monartisan.ci/login.php
X-Content-Type-Options: nosniff

Found 11 hours ago by HttpPlugin

Create report

Open service 51.15.161.204:443 · www.aid.backend.monartisan.ci

2024-12-21 18:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 21 Dec 2024 18:02:15 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 321
Connection: close
Location: http://aid.backend.monartisan.ci/
X-Powered-By: PleskLin

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://aid.backend.monartisan.ci/">here</a>.</p>
<hr>
<address>Apache Server at www.aid.backend.monartisan.ci Port 443</address>
</body></html>

Found 11 hours ago by HttpPlugin

Create report

Open service 51.15.161.204:80 · aid.backend.monartisan.ci

2024-12-21 18:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 21 Dec 2024 18:02:14 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://aid.backend.monartisan.ci/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 11 hours ago by HttpPlugin